Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier: LdSeaWKpOPLt6fjjBKebh1Zi2yNPSsbbDr3guqvKT7M=
Subject key identifier: 9A:43:D1:29:1F:AB:B6:D1:A8:87:14:80:9E:BD:11:4E:92:8E:21:F3
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 0198D7A95F79235FAC7355B5559243313C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:58 +0000
Manifest this update: Sat 23 Aug 2025 16:00:58 +0000
Manifest next update: Sun 24 Aug 2025 16:00:58 +0000
Files and hashes: 1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: DwtidFcVB5gVjN5x4mQjYmL43GIC8nsMgZXrh5ibKms=)
2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:5f:79:23:5f:ac:73:55:b5:55:92:43:31:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Aug 23 16:00:58 2025 GMT
Not After : Aug 24 16:00:58 2025 GMT
Subject: CN=9a43d1291fabb6d1a88714809ebd114e928e21f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:2f:86:66:ac:4d:f2:29:ad:8d:7a:01:62:
0f:69:9a:4b:42:e3:a8:fb:e8:a9:6f:27:51:4e:56:
ee:f0:c0:71:f3:92:38:1f:85:da:51:3e:2f:dc:cb:
f8:c7:67:ed:5f:f6:ef:b5:5a:85:fe:8b:2e:2f:93:
49:67:0e:f0:0a:3e:04:3c:f1:40:8f:3d:bf:06:53:
2b:b0:8c:0a:3d:a4:f0:98:33:84:36:d9:5b:49:b0:
4c:db:86:6c:78:dc:4a:20:01:80:69:27:f7:5b:68:
43:97:ad:b9:6f:fc:fb:ca:bc:f4:6c:6e:2d:25:e5:
74:fa:7d:65:1a:02:dd:cc:71:20:9d:20:42:1a:01:
5b:7f:c7:17:89:ed:3c:f8:75:b4:35:61:03:a2:ea:
45:90:e4:1d:2f:1f:3a:ab:d4:21:ce:30:7b:3a:8b:
1e:a9:be:f6:90:bd:44:d9:45:b1:81:47:8c:68:f4:
f0:51:b8:41:7d:68:22:67:e3:db:3f:04:1e:91:9a:
18:8c:26:ab:ef:a0:2c:09:d1:2d:ca:a2:84:6b:1a:
8c:ba:68:ab:32:a7:91:3c:ab:af:e7:3a:8b:f6:e8:
df:55:84:91:34:78:ff:5f:ab:53:5e:07:4a:41:71:
e7:83:15:c9:33:6d:f5:48:9e:31:00:8f:be:76:e7:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:D1:29:1F:AB:B6:D1:A8:87:14:80:9E:BD:11:4E:92:8E:21:F3
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:c1:93:ac:52:61:ed:c1:9b:d2:f2:95:90:ac:6d:2c:98:
4d:06:8b:2e:dc:cb:e3:85:93:15:87:9c:ca:ee:71:0e:49:fc:
0f:69:a1:e2:b9:fa:8d:b8:1e:4e:39:9b:5f:90:5f:e7:46:16:
62:88:15:97:b8:2b:b1:37:13:94:f7:e8:72:14:46:2b:57:c9:
d4:e6:cb:bb:d6:17:55:c5:07:7d:22:0d:8f:c4:c4:a4:8c:1b:
aa:3d:a3:7c:0c:c7:2a:d2:06:d5:2c:9a:aa:30:e5:44:09:91:
29:86:be:1e:55:f5:ff:8e:ed:0b:76:76:27:b7:ae:45:aa:a1:
b5:13:8d:cb:32:4d:7d:b8:fb:14:70:6d:fe:dc:17:70:7c:3b:
5e:9d:dc:59:d7:84:61:c7:8c:18:96:ee:ce:2f:4c:38:3d:3f:
b3:56:49:28:75:ac:55:92:60:33:05:fa:a1:03:1f:8e:73:c0:
56:2e:be:c1:76:42:59:ab:1e:10:56:8d:a6:33:d5:b7:00:92:
34:76:59:98:2c:7f:2b:87:a6:70:bf:71:fb:d8:8f:c4:ba:1c:
6d:cc:7e:db:13:be:98:91:bf:86:c3:b7:be:ab:b6:e8:0d:4d:
82:57:52:a8:fe:c9:bf:04:3a:96:f6:f1:d3:a1:5f:44:5e:19:
4a:e6:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:44 2025 by rpki-client